https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-50456.htmlhttps://patchthecve.com/cve/CVE-2024-50456.htmlWed, 17 Jun 2026 08:04:30 +0000MEDIUM 5.4: Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through <= 8.1.1.https://patchthecve.com/cve/CVE-2024-50455.htmlhttps://patchthecve.com/cve/CVE-2024-50455.htmlWed, 17 Jun 2026 08:04:30 +0000MEDIUM 4.3: Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through <= 8.1.1.https://patchthecve.com/cve/CVE-2024-5488.htmlhttps://patchthecve.com/cve/CVE-2024-5488.htmlWed, 17 Jun 2026 08:16:02 +0000CRITICAL 9.8: The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present.https://patchthecve.com/cve/CVE-2024-1168.htmlhttps://patchthecve.com/cve/CVE-2024-1168.htmlWed, 17 Jun 2026 07:03:37 +0000MEDIUM 6.4: The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's social image URL in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping on user supplied image URLs. This makes it possible for authenticated athttps://patchthecve.com/cve/CVE-2024-1134.htmlhttps://patchthecve.com/cve/CVE-2024-1134.htmlWed, 17 Jun 2026 07:03:32 +0000MEDIUM 6.4: The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SEO title and description parameters as well as others in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers, https://patchthecve.com/cve/CVE-2024-2165.htmlhttps://patchthecve.com/cve/CVE-2024-2165.htmlWed, 17 Jun 2026 07:23:51 +0000MEDIUM 6.4: The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt parameter in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author access orhttps://patchthecve.com/cve/CVE-2023-6290.htmlhttps://patchthecve.com/cve/CVE-2023-6290.htmlWed, 17 Jun 2026 06:50:27 +0000MEDIUM 4.8: The SEOPress WordPress plugin before 7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed